File tree Expand file tree Collapse file tree 2 files changed +10
-3
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 2 files changed +10
-3
lines changed Original file line number Diff line number Diff line change @@ -28,7 +28,8 @@ deprecated class IntentRedirectionConfiguration extends TaintTracking::Configura
28
28
}
29
29
}
30
30
31
- private module IntentRedirectionConfig implements DataFlow:: ConfigSig {
31
+ /** A taint tracking configuration for tainted Intents being used to start Android components. */
32
+ module IntentRedirectionConfig implements DataFlow:: ConfigSig {
32
33
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
33
34
34
35
predicate isSink ( DataFlow:: Node sink ) { sink instanceof IntentRedirectionSink }
@@ -40,7 +41,7 @@ private module IntentRedirectionConfig implements DataFlow::ConfigSig {
40
41
}
41
42
}
42
43
43
- /** A taint tracking configuration for tainted Intents being used to start Android components. */
44
+ /** Tracks the flow of tainted Intents being used to start Android components. */
44
45
module IntentRedirectionFlow = TaintTracking:: Make< IntentRedirectionConfig > ;
45
46
46
47
/**
Original file line number Diff line number Diff line change @@ -23,12 +23,18 @@ deprecated class FetchUntrustedResourceConfiguration extends TaintTracking::Conf
23
23
}
24
24
}
25
25
26
- private module FetchUntrustedResourceConfig implements DataFlow:: ConfigSig {
26
+ /**
27
+ * A taint configuration tracking flow from untrusted inputs to a resource fetching call.
28
+ */
29
+ module FetchUntrustedResourceConfig implements DataFlow:: ConfigSig {
27
30
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
28
31
29
32
predicate isSink ( DataFlow:: Node sink ) { sink instanceof UrlResourceSink }
30
33
31
34
predicate isBarrier ( DataFlow:: Node sanitizer ) { sanitizer instanceof RequestForgerySanitizer }
32
35
}
33
36
37
+ /**
38
+ * Detects taint flow from untrusted inputs to a resource fetching call.
39
+ */
34
40
module FetchUntrustedResourceFlow = TaintTracking:: Make< FetchUntrustedResourceConfig > ;
You can’t perform that action at this time.
0 commit comments